The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a deny all configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka Bug ID CSCuj66318.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ios | Cisco | - (including) | - (including) |
| Ios_xe | Cisco | - (including) | - (including) |